Incident management procedure - treatment of minor events (3.3)
Assign topic to the user
Answer:
ISO 27001 is not specific on how to record the incidents, which means you can do it in any way that you see fit. This means you could log minor incidents that happen the first time in the Incident log, but in such case I would recommend that you mark separately first-time incidents from those that are happening repeatedly.
Comment as guest or Sign in
Aug 23, 2018

